Prove what an agent was allowed to propose.
ChainMandate evaluates structured onchain intents against owner-defined risk limits before a customer-controlled signer decides whether to act.
{ "agent":"treasury-7",
"action":"open ETH perp",
"notional":"600", "leverage":"5" }
DENY
LIMIT.ORDER_NOTIONAL · max 500 USD
LIMIT.LEVERAGE · max 3×
receipt sha256:a9d7… signed
Your wallet knows what an agent can sign. We provide evidence about what it should sign.
Wallet spend limits do not understand leverage, portfolio exposure, drawdown, stale prices or whether an order still matches the owner's mandate.
Deterministic risk
Decimal-safe limits for venue, asset, notional, leverage, exposure, daily loss, order rate, slippage and stop distance.
Fail closed
Unknown venue, stale market state, unverified account state or missing risk input produces a denial or human review.
Signed evidence
Every returned decision is bound to the intent, policy version, wallet and expiry in a tamper-evident receipt chain.
One decision endpoint. Zero signing authority.
Agent proposes
Structured order, no prompt text.
SigFence checks
Attested connector state plus immutable policy.
Allow, deny, review
Short-lived signed receipt.
Ten days from unknown risk to measurable shadow evidence.
The Agent Safety Sprint maps your agent's trust boundaries, installs its first mandate and evaluates real shadow traffic without receiving signing authority.
Threat model
Agent, wallet, connector and policy boundaries documented against concrete abuse cases.
Shadow integration
Structured intents, signed state snapshots and decision receipts wired into your test path.
Decision report
Blocked, reviewed and unsafe actions with a production gap list and go/no-go recommendation.
Fixed scope. No custody, order routing, investment selection or performance fee.
Priced as infrastructure, never as a share of client profit.
Builder
- 3 agents
- 10,000 evaluations
- 30-day audit
- €0.02 overage
Production
- 25 agents
- 100,000 evaluations
- Portfolio limits
- 12-month audit
Enterprise
- Dedicated tenant
- 1M evaluations
- SSO/RBAC and SLA
- Self-hosted option